[Snyk] Fix for 1 vulnerabilities

[nl253]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	703/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 6.2	Missing Release of Resource after Effective Lifetime SNYK-JS-INFLIGHT-6095116	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: jest

The new version differs by 250 commits.

• 75006e4 v29.0.0
• 7c82a9f chore: update jest-watch-typeahead again
• 352ff29 chore: update changelog for release
• 33ad8c3 docs: Jest 29 blog post (#13103)
• dda77e5 docs: collapse 28.0 and 28.1 docs (#13104)
• c0dc84c chore: update jest-watch-typeahead
• 05f6217 fix: support deep CJS re-exports when using ESM (#13170)
• 490fd88 chore: update yarn (#13169)
• 98936a2 docs: Update Enzyme links to use new URL (#13166)
• 187566a feat(pretty-format): allow to opt out from sorting object keys with `compareKeys: null` (#12443)
• ae2bed7 chore: tweak regex used in e2e tests (#13129)
• 8c56d74 docs: Update Configuration.md for added special notes on usage scenarios for pnpm. (#13115)
• fb1c53d feat(jest-config)!: remove undocumented `collectCoverageOnlyFrom` option (#13156)
• 075b489 fix: ignore `EISDIR` when resolving symlinks (#13157)
• 3bef02e feat(@ jest/test-result, @ jest/types)!: replace `Bytes` and `Milliseconds` types with `number` (#13155)
• 4def94b v29.0.0-alpha.6
• 0f00d4e fix: replace non-CLI `rimraf` usage (#13151)
• 6a90a2c fix: Allow updating inline snapshots when test includes JSX (#12760)
• 983274a feat: Let `babel` find config when updating inline snapshots (#13150)
• d2ff18a chore: make prettierPath optional in `SnapshotState` (#13149)
• 7d8d01c feat(circus): added each to failing tests (#13142)
• a5b52a5 chore(types): separate MatcherContext, MatcherUtils and MatcherState (#13141)
• 79b5e41 chore: get rid of peer dep warning in website
• 812763d chore: enable 'no-duplicate-imports' (#13138)

See the full diff

Package name: markdownlint-cli

The new version differs by 250 commits.

• ce0d77a Bump version 0.34.0
• 3de966d Add Node 20 to CI test matrix.
• e540262 Bump xo from 0.54.1 to 0.54.2
• 02edb23 Bump markdownlint from 0.28.1 to 0.28.2
• 5024217 Bump glob from 10.1.0 to 10.2.2
• 26bbe10 Bump glob from 10.0.0 to 10.1.0
• 3f3c26c Bump xo from 0.54.0 to 0.54.1
• 98660a3 Bump commander from 10.0.0 to 10.0.1
• 5c71ad6 Bump glob from 9.3.4 to 10.0.0
• cd230b0 Update markdownlint.js to group require calls together for new xo policy.
• 1910c83 Bump xo from 0.53.1 to 0.54.0
• fc825b4 Bump markdownlint from 0.28.0 to 0.28.1
• 49da7ee Bump minimatch from 8.0.3 to 9.0.0
• afd8f0c Bump glob from 9.3.2 to 9.3.4
• 5027dd0 Bump minimatch from 7.4.3 to 8.0.3
• 2d95a13 Bump minimatch from 7.4.2 to 7.4.3
• 4e6fb32 Bump glob from 9.3.0 to 9.3.2
• 6da2a65 Bump markdownlint from 0.27.0 to 0.28.0
• 9844fce Bump execa from 7.1.0 to 7.1.1
• c9b0147 Rename local-only "test-rule-package" to avoid incorrect attribution to malware on npm via Dependabot alerts (https://snyk.io/redirect/github/igorshubovych/markdownlint-cli/security/dependabot/4).
• e6a706f Normalize "\" character in output path to get tests passing on Windows after dependency update to glob v9.
• 1636b71 Bump glob from 8.1.0 to 9.3.0
• a1ca192 Bump webpack from 5.64.1 to 5.76.1
• 12c54e6 Bump execa from 7.0.0 to 7.1.0

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.